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Abstract 


\ 

It  is  often  necessary  to  predict  the  reliability  of  a  system  when 
only  the  mean  lifetimes  of  its  components  are  known.  Then  it  is  usually 
assumed  that  each  component  has  a  constant  failure  rate  (equal  to  the 
reciprocal  of  its  mean  lifetime)  and  that  component  failures  occur 
independently.  It  is  customary  to  express  the  prediction  in  terms 
of  some  constant  failure  rate  for  the  system.  Questions  arise  as  to  when 
this  procedure  is  precise,  and  if  it  is  not  precise,  what  constant  values 
for  the  system  failure  rate  give  reasonable  approximations  for  the  actual 
system  failure  rate  function. 

In  this  paper  these  questions  are  answered  in  the  case  that  com¬ 
ponents  (a)  fail  independently  and  (b)  have  constant  failure  rates.  Then 
it  is  well  known  that  the  failure  rate  of  a  series  system  is  constant  and 
equal  to  the  sum  of  the  component  failure  rates.  When  (a)  and  (b)  hold , 
the  system  failure  rate  can  be  constant  only  for  a  series  system.  For 
other  than  series  systems  approximate  constant  failure  rates  should  be 
chosen  to  lie  between  two  bounds  that  can  be  computed  from  the  component 
failure  rate8.  (The  lower  bound  is  the  sum  of  the  component  failure  rates 
for  those  components  that  can  cause  system  failure  by  their  single,  isolated 
failure.  The  upper  bound  is  the  smallest  sum  of  component  failure  rates  that 
can  be  obtained  for  any  set  of  components  that  can  insure  the  functioning  of 
the  system  by  all  functioning.)  For  such  choices  the  predicted  system 
reliability  will  be  accurate  for  a  mission  of  some  particular  duration, 
smaller  than  the  actual  system  reliability  for  shorter  missions,  and  larger 
than  the  actual  system  reliability  for  longer  missions.  For  any  other  choice 
the  prediction  will  always  be  too  large  or  too  small. 


1.  Introduction 


It  is  a  familiar  practice  to  convert  a  given,  or  estimated,  mean 
lifetime  (mean  time  to  failure)  for  a  device  into  a  reliability  predic¬ 
tion  by  assuming  that  its  lifetime  has  an  exponential  distribution, 
i.e. , 


(1.1)  If  T  >  0  is  the  random  lifetime  of  a  device, 
and  m  «  E(T)  is  its  mean  lifetime,  then  its 
reliability  P[T>t]  for  a  mission  of  duration 
t  is  approximated  by 

P [T>t ]  -  e"Xt,  t  >  0, 
where  \  *  1/m. 

The  procedure  described  in  (1.1)  is  equivalent  to  assuming  that  the 
device  has  a  constant  hazard  (failure)  rate  \  m  1/m. 

When  the  mean  lifetimes  of  components  are  used  to  predict  the 
reliability  of  the  system,  it  is  also  customary  to  express  the  predic¬ 
tion  in  terms  of  a  mean  lifetime  for  the  system  with  the  understanding 
that  (1.1)  will  be  used  to  approximate  reliabilities.  It  is  also  usual 
in  arriving  at  the  prediction  to  assume  that  components  fail  independently. 

The  practices  mentioned  above  raise  the  following  questions: 

Assuming  that  the  lifetimes  of  components  are  statistically  independent 
and  have  exponential  distributions ,  then: 


(1.2) 


For  what  systems  does  the  system  lifetime  actually 
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have  an  exponential  distribution! 

(1.3)  For  a  system  whose  lifetime  is  not  exponentially  dis¬ 
tributed,  which  exponential  distributions  give 
reasonable  approximations  to  the  actual  system  life¬ 
time  distribution! 

Part  of  the  answer  to  Question  (1,2)  is  very  well  known.  If  the 
lifetimes  of  the  components  in  a  series  system  (i.e.,  a  system  that 
fails  with  its  first  component  failure)  have  exponential  distributions, 
then  the  system  lifetime  has  an  exponential  distribution.  We  show  that 
only  series  systems  have  this  property. 

It  is  also  known  that  if  the  lifetimes  of  the  components  in  a 
coherent  system  have  exponential  distributions,  then  the  system  lifetime 
has  an  increasing  h  i/ard  (failure)  rate  average  (IHRA)  distribution 
(Birnbaum,  Esary,  and  Marshall,  I960].  We  answer  Question  (1.3)  by 
exhibiting  an  interval  in  which  an  approximate,  constant  system  failure 
rate  must  lie  if  the  corresponding  approximate,  exponential  distribution 
for  the  system  lifetime  is  to  give  the  same  reliability  prediction  as 
the  actual  IHRA  distribution,  at  least  for  a  mission  of  some  duration  t. 

Notation.  We  use  the  standard  vector  notation  a  ■  (a . a  ). 

-  —  ■  •+*  i  n 

ca  ■  ac  ■  (ca.  , . . .  ,ca  ) ,  and  the  special  convention  e  ~  *  (e  1 , . . .  ,e  n) . 
^  ^  i  n 

2.  The  Hazard  Transform  of  a  Coherent  System 

The  structure  fw.ct’rn  }(x  ,...,xn)  describes  the  organization  of 
a  system;  indicates  the  state  of  the  i^  component,  with  x^  *  1 

if  the  component  is  functioning  and  x^  *  0  if  the  component  is  failed, 


and  $  indicates  the  corresponding  state  of  the  system,  with  $(^0  ■  1 
if  the  system  is  functioning  and  $00  "0  if  the  system  is  failed.  A 
system  is  coherent  if  its  structure  function  is  increasing  in  each  of  its 
arguments  and  is  not  constant  in  any  of  its  arguments. 

The  reliability  function  h(p1,...,p  )  is  defined  by 

(2.1)  h(p)  -  P{$(X. . X)  -  1], 

in 

0  <  pi  <  1,  i  *  1,.. . ,n, 

where  X1 . X^  are  independent  Bernoulli  random  variables  with 

P[Xj*l]  *  p^,  and  $  is  the  structure  function  of  the  system. 

The  hazard  transform  n(P1,...,Pn>  is  defined  by 

(2.2)  H(p)  -  -log  h(e  Pl . e  Pn) , 

P  ^  —  0,  i  *  1 1 . .  •  ,n , 

where  h  is  the  reliability  function  of  the  system. 

In  this  paper  a  special  role  is  played  by  the  series  system  for 
which  $(x)  -  h<p)  *  TTiHiPi*  “d  n(p)  - 

In  the  context  of  Questions  (1.2)  and  (1.3)  the  components  in  a 
coherent  system  are  assumed  to  have  Independent  random  lifetimes  T^,...,^. 
Let  T  be  the  corresponding  random  lifetime  for  the  system.  Then  it 
follows  from  (2.1)  that 

P [T> t ]  -  h{p[T1>t],  ...,  P[Tn>t]},  t  i  0, 


(2.3) 
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by  choosing  the  Bernoulli  random  variables  so  that  X^^  «  1  <=>  >  t, 

i  *  1 . .  and  noting  that  T  >  t  <*>  $(X)  =1.  If 

R(t)  -  -log  P  [T>t] ,  t  >  0,  i.e.,  P[T>t]  -  e~R(t),  and  R  (t)  -  -log  P [T±>t ] , 
t  2  0,  i  ■  l,...,n,  then  it  follows  from  (2.3)  and  (2.2)  that 

(2.4)  R(t)  -  n{Rj(t) . Rn(t)}»  t  >  0. 

R  is  the  hazard  function  of  the  random  lifetime  T  and  Ri»***»Rn 
are  the  hazard  functions  of  .  The  hazard  transform  of  a  coherent 

system  expresses  the  hazard  function  of  the  system  lifetime  in  terms  of 
the  hazard  functions  of  the  component  lifetimes. 

For  our  purposes  the  hazard  transform  is  a  useful  description  of  a 
coherent  system.  If  the  component  lifetimes  have  exponential  distribu¬ 
tions,  i.e.,  P[T^>t]  »  e  ^it,  t  *  0,  then  their  hazard  functions  are 

R^(t)  ■  A^t,  i  K  1 . n.  Then  (2.4)  becomes 

(2.5)  R(t)  -  n(Xlt,... .A^t) ,  t  l  0, 

i.e.,  questions  such  as  (1.2)  and  (1.3)  reduce  to  studies  of  the  behavior 
of  the  hazard  transform  on  rays  {Xt,t>0}  in  its  domain. 

In  what  follows  we  will  need  certain  properties  of  the  hazard 
transform  of  a  coherent  system: 

(2.6)  n(0 . 0)  -  0,  and  nip  )  >  0  whenever  Pl  >  0,  i  -  l,.,.,n. 

(2.7)  n  ta  increasing  in  each  of  its  arguments. 

(2.8)  n  ta  8tarshapedt  i.e.t  n(«£)  5  an(p)  for  all  p  and  all  0  <  a  s  1. 


(2.9)  If  n(ap)  «  an(p)  for  some  p  such  that  p.  >  0, 
i  -  and  some  0  <  a  <  1,  tfcen  i?ze  system 

is  a  series  system. 

The  first  two  properties  above  are  equivalent  to  familiar  elementary 
properties  of  the  structure  and  reliability  functions  of  coherent  systems. 
Property  (2.8)  comes  from  an  inaquality  for  the  reliability  function 
obtained  by  Bimbaum,  Esary,  and  Marshall  (1966,  Theorem  2.1).  The 
details  of  the  translations  of  properties  (2.6)  through  (2.8)  into 
hazard  terminology  and  the  proof  of  property  (2.9)  are  given  in  Esary, 
Marshall,  and  Proschan  (1969). 

Other  examples  of  coherent  systems  are  given  in  Bimbaum,  Esary, 
and  Saunders  (1961)  and  Barlow  and  Proschan  (1965). 

3.  Exponential  System  Lifetimes 

If  the  components  in  a  series  system  have  independent,  exponentially 
distributed  lifetimes,  then  it  is  easy  to  confirm  the  well-known  fact 
that  the  system  lifetime  is  exponentially  distributed.  From  (2.5)  and 
the  definition  of  a  series  system 

(3.1)  R(t)  -  2J.!  Xtt  -  t.  t  ;  0  , 

where  R  is  the  system  hazard  function  and  Xj,.,.,^  are  the  component 
hazard  rates,  i.e.,  R  is  the  hazard  function  of  an  exponential  distribution. 

For  the  remainder  of  this  paper  we  will  explicitly  assume  that  the 
hazard  rate  of  an  exponentially  distributed  lifetime  is  not  zero ,  With 
this  assumption  the  ray  {Xt,t-0}  determined  by  the  hazard  functions  of 
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a  set  of  exponentially  distributed  component  lifetimes  is  an  iriicrior 
ray  ,  i.e.,  A^  >  0,  i  c  l,...,n.  (We  have  already  tacitly  assumed  that 
exponential  hazard  rates  are  finite,  e.g.,  in  writing  (2.5)  when  the 
hazard  transform  is  defined  for  finite  arguments.) 

The  rest  of  the  answer  to  question  (1.2)  is  then  contained  in  the 
following  proposition: 

(3.2)  Proposition.  Suppose  that  the  lifetimes  of  the  components  in 
a  coherent  system  are  independent  and  exponentially  distributed.  If  the 
system  lifetime  is  exponentially  distributed ,  then  the  system  is  a  series 
system. 

Proof.  If  the  system  lifetime  is  exponentially  distributed,  then 
R(t)  *  wt,  t  2  0,  for  some  u  >  0,  where  R  is  the  hazard  function  of 
the  system  lifetime.  Then  (2.5)  becomes  n{^t}  *  ut,  t  i  0,  where  n 
is  the  hazard  transform  of  the  system  and  A^  >  0,  i  *=  l,...,n,  are  the 
component  hazard  rates.  Consider  some  t  >  0  and  some  0  <  a  <  1. 

Let  *  A^t,  i  *  l,...,n.  Then  n(a£)  *  Ma^t)  ■  nfA^at)}  «=  u(at) 

■  a(pt)  *=  an(At)  ■  an(p).  Since  p,  >  0,  i  *  l,...,n,  the  system  must 
be  a  series  system  by  property  (2.9).  [] 

4,  Initial  and  Terminal  System  Hazard  Rates 

When  the  components  in  a  coin  rent  system  have  independent,  exponen¬ 
tially  distributed  lifetimes,  it  follows  from  (2.5)  that  the  hazard  rate 
at  time  t,  R'(t)  ■  dR(t)/dt,  for  the  system  lifetime  is  given  by 

R'(t)  *  n'Ujt . \nt) ,  t  >  0, 


(4.1) 


where  n'(Xt)  *  dn(Xt)/dt,  n  is  the  hazard  transform  of  the  system, 

R  is  the  system  hazard  function,  and  X1 . Xr  are  the  component 

hazard  rates.  For  a  non-series  system,  R  is  not  the  hazard  function  of 
an  exponential  distribution  by  Proposition  3.2,  so  that  R'  is  not  a 
constant  function  of  t.  In  Section  5  it  is  shown  that  any  constant 
approximation  to  R'  should  lie  between  R'(0)  and  lim^^R*  (t)  , 

This  section  is  devoted  to  deriving  convenient  expressions  for  these 
bounds. 

The  i*-*1  component  in  a  coherent  system  is  a  out  of  the  system  if 
its  failure  is  sufficient  to  cause  the  failure  of  the  system,  i.e.,  if 
x^  *=  0  implies  $(x)  «  0  where  $  is  the  structure  function  of  the 
system.  The  derivation  which  follows  shows  that  on  a  ray  {^Xt,tiO} 

(4.2)  n’(xp)  -  SieK  Aj, 

where  K  is  the  set  of  all  components  that  are  cuts  of  the  system. 

We  say  that  yQ  *  5  ig;K  X ^  is  the  initial  hazard  rate  for  the  system 
on  the  ray  since  from  (4.1)  R'(0)  *  yQ . 

A  set  of  components  P  in  a  coherent  system  is  a  path  set  if  the 
functioning  of  each  component  in  P  insures  the  functioning  of  the 
system,  i.e.,  if  x^  ■  1  for  all  i  e  P  implies  <J>(>c)  *  1.  The 
derivation  which  follows  shows  that  on  an  interior  ray  {,Xt,t£0} 

(4.3)  lim  n'(Xt)  *  y  , 

t-*«0  ~  00 

where 


I 
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y^  *=  min{  p^J  P  is  a  path  set}. 

We  say  that  y^  is  the  terminal  hazard  rate  for  the  system  on  the  ray 
since  from  (4.1)  lim  R'(t)  =  y  .  The  same  derivation  shows  that 

QO 

(4.4)  limt^oo{yoot-n(U)}  =  log  r, 

where  r  is  the  number  of  path  sets  P  for  which  _A.  *=  y  . 

For  a  series  system,  yQ  *  y^  *=  A  from  (3.1).  The  same 

conclusion  can  be  obtained  directly  from  the  definitions  of  yQ  and 
y^  since  on  the  one  hand  each  component  in  a  series  system  is  a  cut  of 
the  system  and  on  the  other  hand  there  is  only  one  path  set  for  a  series 
system,  i.e.  ,  the  set  of  all  components.  For  a  non-series  system  Kc  P 
for  any  path  set  P,  and  furthermore  K  4  P.  Thus  for  a  non-series 
system  and  an  interior  ray,  yQ  <  y^. 

The  remainder  of  this  section  consists  of  a  derivation  to  confirm 
(4.2),  (4.3),  and  (4.4). 

From  (2.3) 

0.5)  n'(H)  ■  ■  t>0, 

h(e  —  ) 

where  h'(e  ~fc)  *  dh(e  ~C)/dt  and  h  is  the  reliability  function  of 
the  system. 

From  (2.1),  h(p)  ■  E { ^ (X) } »  so  that 
h(e  ~C)  «=  2  <^(x)P(x,A,t)  , 

X  ^  ^  ^ 


(4.6) 


t  >  0, 


<  i 


where  $  is  the  structure  function  of  the  system, 

(4.7)  -TTi£c,(„''XinTcC  (x,<1-'‘Xlt). 


I*”/ 


0  ~ 


and  C  (x)  =  {i:x  =l},  C  (x)  *  { i : x . =0 } .  From  (A. 6) 
(A. 8)  h' (e  ~t)  «  £  $(x)P'(x,A,t) »  t  >  0, 

x  ~  ~  ~ 

where  p' (*,*,»  t)  *  ^(jx^.t) /dt.  From  (A.  7) 


(A. 9) 


"  "feieC  (x)Xi)P^~,^’t^ 
1  ~ 


+  SieC0(x)XiP^(1i,~)~,t^ 


^  ^  i  ’%)  ^ x  1  ’  *  *  *  *  xi-l,1,xi+l . *r? 


From  (A. 7) 


(A. 10) 


P(x,^,0) 


1  if  x  “  1 
0  otherwise, 


where  1  ■  Then  from  (A. 9)  and  (A. 10) 

yj  .A.  if  x  -  1 
Liel  i  ~  ~ 

(A. 11)  P'(x,A,0)  *  A.  if  x  ■  (0.,1),  i  ■  1 . . 

*V  1  ^  1  ** 

0  otherwise, 


where  (0 . ,x)  *  (x  , ...,x,  , ,0 ,x ,x  ).  Then  from  (A. 6)  and 
l  ^  1  i“l  l+l  n 

(A. 10) 


(A. 12) 


h(e”~°)  -  $(1)  -  1, 


and  from  (A. 8)  and  (A. 11) 


I 
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(A. 13)  h'(e‘-°)  =  -*(1)  y"=1Xi  + 


V 


ieKXi' 


Then  (A. 2)  follows  from  (A. 5),  (A.  12),  and  (A. 13) 


Let  y(x,X)  =  ^  .  ,  ,  x X . •  From  (A. 7)  with  X  >  0, 

~~  —ieC,(x)  i  i 


(A.1A) 


lim 


pfa^.0  .  1  lf  “ ' 

0  if  y  <  y(x,X) . 


-yt 
e 


Then  from  (A. 9)  and  (A.1A) 


(A. 15) 


lim 


t-KO  -V,t 

e 


0  if  y  <  y(x,,,x) 


Then  from  (A. 6)  and  (A.1A) 


(A. 16) 


Urn  -  I  ♦(x)  lim 

t-*»  e-y<x,  t  ‘-x¥  ~  t-x»  e-y00t 


Slv!, 


'{xJ^Cx^-i.yCx^-y^} 
Similarly  from  (A. 8)  and  (A. 15) 


1  *  r. 


h*  (e~~fc) 


(A. 17)  lim  -  -  ■  ■■■--  -  -ry 

t-*»  -y^t 

Then  (A. 3)  follows  from  (A. 5),  (A. 16),  and  (A. 17),  since 


lim  n'(Xt) 

C-x»  ^ 


lim 


-h,(e~~t)/e~p°°t 

h(e'lt)/e‘u-t 


r 


t 


From  (2.2) 

.  ,  -Xt. 

,,  v  ,  h(e  ~  ) 

*0*)  -  w.t  *  -l08  -r—  —  . 

e 

so  that  (4.4)  follows  from  (4.16). 

5.  Exponential  Approximations  for  System  Lifetimes 

If  the  components  in  a  coherent  system  have  independent,  exponen¬ 
tially  distributed  lifetimes,  then  from  (3.1)  and  Proposition  (3.2)  the 
system  lifetime  is  exponentially  distributed  if  and  only  if  the  system 
is  a  series  system.  Question  (1.3)  asks  what  exponential  distributions 
are  reasonable  approximations  to  the  actual  distribution  of  the  system 
lifetime  when  the  system  is  not  a  series  system.  The  answer  to  Question 
(1.3)  is  contained  in  the  following  proposi tion: 

5.1  Proposition.  Let  R  be  the  hazard  function  of  the  lifetime  of  a 
coherent  system  that  is  not  a  series  system.  Suppose  that  the  component 
lifetimes  are  independent  aid  exponentially  distributed  with  hazard  rates 

X^  >  0,  i  ■  1 . n.  Let  be  the  initial  hazard  rate  for  the 

system  on  the  ray  {H.t^O}  and  be  the  terminal  hazard  rate  on 
the  ray.  Then : 

(i)  If  yQ  <  y  <  there  exists  a  t  >  0  such  that 

R(t(j)  *  ut^.  Also  R(t)  <  u t  if  0  <  t  <  ty  and 
R(t)  >  yt  if  t  >  t  . 

(ii)  uQt  <  R(t)  <  y^t  for  all  t  >  0. 

Proof.  From  (2.5),  R(t)  =  n(*t),  t  L  0,  where  n  is  the  hazard 
-  ■  — "  ~~  1 
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transform  of  the  system.  Since  the  system  is  not  a  series  system, 

0  "  ;'o  <  p<x,  fcf •  Action  4]. 

(i)  From  (A. 2)  n'(XO)  =  p  and  from  (4. A)  n(Xt)  is  asymptotic 

~  0  ^ 

to  the  straight  line  p  t  -  log  r  as  t  ■*  x.  Thus  if 

<  p  <  P  >  then  there  is  a  t  >0  such  that 

0  ®  p 

n(\t  )  *  pt  .  Since  the  system  is  not  a  series  system 

Jj 

and  X^  >  0,  i  =  1 . .  it  follows  from  properties 

(2.8)  and  (2.9)  that  n  is  strictly  starshaped  on  the 

ray  {Xt,t*0},  i.e.,  n{x(at)}  <  anQt)  for  all 

t  >  0  and  all  0  <  a  <•  1.  Suppose  0  <  t  <  t  and 

U 

let  a  =  t/t  .  Then  0  <  a  <  1  and  n(Xt)  =  n{x(at  )} 

<  an(^t^)  =  apt  *  pt.  Similarly  if  t  >  t^,  then 

n(Xt)  >  ut. 

(ii)  This  conclusion  can  be  proved  by  arguments  similar  to  those 
used  for  part  (i),  but  is  also  immediate  from  the  defini¬ 
tions  of  pQ  and  p^.  Q 

Proposition  (5.1)  is  illustrated  for  two  simple  systems  in  Figure 

1. 

Recall  that  the  hazard  function  R  of  the  system  lifetime  T  is 

related  to  the  reliability  of  the  system  for  a  mission  of  duration  t 
— R(  t) 

by  P[T>t]  ■  e  ,  and  that  using  an  exponential  distribution  for  T 
with  hazard  rate  p  >  0  leads  to  the  approximation  P[T>t]  e  Wt, 

Part  (i)  of  Proposition  (5.1)  says  that  if  pQ  <  p  <  p^  an  exponential 

approximation  gives  the  correct  reliability  for  a  mission  of  some 
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duration  t  >  0,  too  large  a  reliability  for  missions  of  duration  t 
such  that  0  <  t  <  t  ,  and  too  small  a  reliability  for  missions  of 

p 

duration  t  >  t^.  Part  (ii)  says  that  if  p  1  pQ  an  expotiential 

approximation  gives  too  large  a  reliability  for  all  missions  ,  and  if 
p  !  an  exponential  approximation  gives  too  small  a  reliability  for 
all  missions. 

If  it  is  feasible  to  evaluate  the  reliability  function  h  of 
a  coherent  system  for  a  given  set  of  arguments,  then  there  is  a  simple, 
standard  method  for  determining  an  approximate  constant  system  hazard 
rate  p  which  gives  a  correct  reliability  prediction  for  a  given  nominal 
mission  duration  t,  i.e.,  let 

(5.2)  „  -  ~loB  h(e~>  . 

where  X  ,...,Xn  are  the  component  hazard  rates.  Then  from  (2.3) 

P[T>t]  «=  e  Ut,  where  T  is  the  system  lifetime,  and  it  follows  from 
part  (ii)  of  Proposition  (5.1)  that  pQ  <  p  <  pb. 
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